Buffer Overflow in PFCP Library of Open5GS Products
CVE-2025-44951
7.1HIGH
What is CVE-2025-44951?
A missing length check in the ogs_pfcp_dev_add function of the PFCP library utilized by Open5GS allows local attackers to exploit a buffer overflow. By manipulating the session.dev field with a value exceeding 32 bytes, an attacker can potentially destabilize the application and execute arbitrary code. This vulnerability affects multiple versions of Open5GS and requires immediate attention.
References
CVSS V3.1
Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved